aboutsummaryrefslogtreecommitdiffstats
path: root/etc/profile-a-l/ar.profile
diff options
context:
space:
mode:
authorLibravatar glitsj16 <glitsj16@users.noreply.github.com>2020-12-15 19:05:54 +0000
committerLibravatar GitHub <noreply@github.com>2020-12-15 19:05:54 +0000
commit4a40e2a5f2009cf282dd783e73e1fb860ac758ba (patch)
tree98ab549570bd67a4987bb2b1ad019b372c205f54 /etc/profile-a-l/ar.profile
parentRunuser fixes (#3826) (diff)
downloadfirejail-4a40e2a5f2009cf282dd783e73e1fb860ac758ba.tar.gz
firejail-4a40e2a5f2009cf282dd783e73e1fb860ac758ba.tar.zst
firejail-4a40e2a5f2009cf282dd783e73e1fb860ac758ba.zip
Refactor archivers (#3820)
* Create archiver-common.inc * add apparmor to archiver-common.inc * refactor 7z.profile * refactor ar.profile * refactor atool.profile * refactor bsdtar.profile * refactor cpio.profile * refactor gzip.profile * refactor tar.profile * refactor unrar.profile * refactor unzip.profile * refactor xzdec.profile * refactor zstd.profile * rewording * blacklist ${RUNUSER} in archiver-common.inc Thanks to @rusty-snake for suggesting this. * drop non-sensical ${RUNUSER}/wayland-* blacklisting in archiver-common.inc See discussion in https://github.com/netblue30/firejail/pull/3820#discussion_r543523343
Diffstat (limited to 'etc/profile-a-l/ar.profile')
-rw-r--r--etc/profile-a-l/ar.profile38
1 files changed, 1 insertions, 37 deletions
diff --git a/etc/profile-a-l/ar.profile b/etc/profile-a-l/ar.profile
index 183587ff8..a600eddef 100644
--- a/etc/profile-a-l/ar.profile
+++ b/etc/profile-a-l/ar.profile
@@ -7,42 +7,6 @@ include ar.local
7# Persistent global definitions 7# Persistent global definitions
8include globals.local 8include globals.local
9 9
10blacklist ${RUNUSER}/wayland-* 10include archiver-common.inc
11
12include disable-common.inc
13include disable-devel.inc
14include disable-exec.inc
15include disable-interpreters.inc
16include disable-passwdmgr.inc
17include disable-programs.inc
18include disable-shell.inc
19
20apparmor
21caps.drop all
22hostname ar
23ipc-namespace
24machine-id
25net none
26no3d
27nodvd
28nogroups
29nonewprivs
30#noroot
31nosound
32notv
33nou2f
34novideo
35protocol unix
36seccomp
37shell none
38tracelog
39x11 none
40 11
41private-bin ar 12private-bin ar
42private-cache
43private-dev
44
45dbus-user none
46dbus-system none
47
48memory-deny-write-execute